last executing test programs: 4.163283132s ago: executing program 0 (id=528): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x393e, 0xfffffffffffffeac) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket(0x1e, 0x6, 0x5) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r9, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_socket_connect_nvme_tcp() fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') 4.028066865s ago: executing program 0 (id=529): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x2, 0x4, 0x5, 0x9, 0x11, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @remote, 0x100}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3e}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb0, 0x4, {0x6, 0x32, 0x5, 0x8c, 0x0, 0x0, 0x0, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x88}}, 0x2004c010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) 3.296645929s ago: executing program 4 (id=531): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000bc0)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/119, 0x77}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000001200)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78fc", 0x24a}, {&(0x7f0000000e40)="5be081cd2e5383c893e2c864f68d85738305437c98b91b9455046f57b5fc090014b5e2bb01000000000000001a7838d859203067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729", 0x4e}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3d", 0x14}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa27}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x163a80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000480)={{0x0, 0x4}, 'port0\x00', 0x1c, 0x80002, 0x80000, 0xffffffff, 0x74dd, 0x80000001, 0x10, 0x0, 0x1, 0x1}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000003c40)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x1, {0x2008}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, 0x7, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000140)='\xbf/\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004885}, 0x50) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, r8) r9 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.237233715s ago: executing program 4 (id=532): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) dup3(r1, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1, 0x13, 0x200, 0x55}, 0x8, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000000000007e000000080003003541b6a2dd31db91fbc0e00738b1f93ffc549d8288c50b8740292b9c83a24a362c", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x5}]}, {0x0, [0x5f, 0x61, 0x5f, 0x6f, 0x5f, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0xffffffff}, 0x28) 3.058180203s ago: executing program 0 (id=533): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) write$P9_RWALK(r2, 0x0, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) brk(0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001180)=ANY=[@ANYBLOB="10236d3f00000001"], 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001500)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private2}}, &(0x7f0000004580)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, r6, &(0x7f0000001600)) ioprio_set$uid(0x0, r6, 0x4007) 2.801754859s ago: executing program 2 (id=534): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d000000040000000200", @ANYBLOB="05b94d000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r6, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x280040, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 2.611824008s ago: executing program 2 (id=535): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a32"], 0x98}}, 0x4000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x1) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) dup(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe4841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, 0x0, 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x88c, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 2.403414658s ago: executing program 2 (id=538): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 2.314045327s ago: executing program 4 (id=540): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000ac0)={0x2, "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"}, 0x1cc, 0x800) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000100)={[{@bsdgroups}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380180003801400018005000200000000000800010004000000b40003801800018005000200000000000400030004000300040003"], 0xfc}}, 0x804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20004040) syz_open_procfs(r0, &(0x7f00000008c0)='net/ip_tables_targets\x00') 2.105107809s ago: executing program 0 (id=542): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000001200)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78fc", 0x24a}, {&(0x7f0000000e40)="5be081cd2e5383c893e2c864f68d85738305437c98b91b9455046f57b5fc090014b5e2bb01000000000000001a7838d859203067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729", 0x4e}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3d", 0x14}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa27}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x163a80) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000480)={{0x0, 0x4}, 'port0\x00', 0x1c, 0x80002, 0x80000, 0xffffffff, 0x74dd, 0x80000001, 0x10, 0x0, 0x1, 0x1}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000003c40)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x1, {0x2008}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, 0x7, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='\xbf/\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20004885}, 0x50) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, r6) r7 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.080855301s ago: executing program 2 (id=543): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) fadvise64(r2, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 1.905196809s ago: executing program 0 (id=544): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setregid(0x0, r7) 1.568586923s ago: executing program 1 (id=546): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001980)}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}, {&(0x7f0000000800)="696b487a92e473bb265f9a7a", 0xc}], 0x2}}], 0x2, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f00000002c0)='workqueue_activate_work\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x67, 0xffffffffffffff60) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 1.392670761s ago: executing program 4 (id=547): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) 1.231910737s ago: executing program 3 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$eJzs3d9r2+YawPFHaUJSF8rhnEMpIWnfpudACqmPbLcpppwLTX7tvK0sGUkuyVUJjVNCnW40Gyy5Gb3pNtj+iN7ujxj7h8pud5chyW6dX1ZIUzuE78e072vpsd5HstGDYksSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAglluz7ZIlnvHbq+pkbi0MmkPm95d370AzZFwRK/knMzNyM5t089+fZt9I/luQuezZnMwkzYzsXbvxj8f/mpzov35IQiOxs7v3ar3b7bwZdyJj0tC+iQLTdBpamShQ1asislKPVN14OlqLYt1UbqidOAjVontPlarVitLFtaDtN2qOp/sTH90v2/ayelJsaSeMAv9/T4qRu2I8z/iNNCaZncQ8Sj6IT02sYu00ldrc6nYqeUkmQaXTBJXzgsp2uVwqlcul5YfVh49se/LIBPsQORIx/g8txuuc9+DA2U306r94YsSXtqyKOvbhSk1CCaR5wvyefv3/7/TwcQfrf7/K3/w0e1bS+n8re3brpPp/Qi6je+zIruzJK1mXrnSlI2/GntFoHw3R4ouRSAIx0hQnnaJ6U5RUZVmWxZbnsiJ1iURJXYx4oiWSNYkkFp1+olwJRYsjsQQSipJFceWeKCnJ/nRVKqJES1HWJJC2+NKQmjjpUjZlK93ulSE5fgwqnSaoPCSI+o/Pd+77cOCs9vv1HwAAAAAAXFpW+tf35Ph/SuZFpiypG0/b404LAAAAAACco/Sb/7mkmUp682Jx/A8AAAAAwGVjpefYWSJSkNtZr38mFH8EAAAAAADgkki//7+VNIWkd1ssjv8BAAAAALhsfupffXfi0DV2/0inWpZErWnr9z8lDKest63V/1jbTjLD2b6Sve7K4SXG9Vnrem8habM82Xvm6jmrd/XLjxfB/NBrNvOu9W+dQwLyi9zJYu5sZO1Gf042SqFuPF10A+9xSRzn+kSsV+PvXm99L+nq/+w3r1uyudXtFF983d1Ic3mbLOXtdu8Cikeuozgkl29lPouZP36Np9ITMXrjFrJx7cH1n+i/cacf850sZDELhawtHFz/mWTMUvFxfz0OrX2WxfSMyGet+Tu5m8XcXbybNcdkUS6e9B70tkV5cPufaVucIotKXhaVvCyu/X9oFgAwLps5Vcg6WvjPsK8dTXV/J4tZzOJsumOdnD1mj27n7dHtz6zrvx25B9LxNbaUjvtrMu4PstXtlNJx3ycveH/iuJFXtkQmRfa3v5EbO7t797e21192XnZel8uVZfuBbT8sy9Tm1mTHTppux6b2AACOkX+PndwI60HOUfU/P/6koCgvRP7a39+QpfRsg/QXB8cutTDwM4SlnKPWwsAdXpZyjuoKAzd6OX1sZQTvBAAAo7OQU4dPU/+Xco67D9by4UfHg7UcAAB8GTr8YBXiH60wNK3npWq15MQrWoWB+1SFptbQyvixDt0Vx29o1QqDOHADL+k8MzUdqajdagVhrOpBqFpBZFbTO7+r3q3fI910/Ni4UcvTTqSVG/ix48aqZiJXtdpfeSZa0WH64qilXVM3rhObwFdR0A5dXVQq0nog0NS0H5u6Sbq+aoWm6YRr6lngtZta1XTkhqYVB9kC+2MZvx6EzXSxxXFvbAAALoid3b1X691u580X7Ix7HQEAwEFUaQAAAAAAAAAAAAAAAAAAAAAALr78E/iujuQcwYvVmb4YaYy7M3Ex0sg6M4Mf2wuQz7l1LLkQaRzujG+fBGA0/g4AAP//CXJN1A==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setregid(r7, 0x0) 922.044178ms ago: executing program 2 (id=549): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x393e, 0xfffffffffffffeac) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket(0x1e, 0x6, 0x5) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r9, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_socket_connect_nvme_tcp() fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') 909.421629ms ago: executing program 0 (id=559): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) fadvise64(r2, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 722.222468ms ago: executing program 3 (id=550): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d000000040000000200", @ANYBLOB="05b94d000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r6, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x280040, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 667.437323ms ago: executing program 1 (id=551): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffffffffff00000000000086dd6900040000202c00fc020000000000000000000000000001ff0200000000000000000000000000010402"], 0x5a) 619.056098ms ago: executing program 3 (id=552): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 506.88475ms ago: executing program 2 (id=553): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) write$P9_RWALK(r2, 0x0, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) brk(0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001180)=ANY=[@ANYBLOB="10236d3f00000001"], 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001500)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private2}}, &(0x7f0000004580)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, r6, &(0x7f0000001600)) ioprio_set$uid(0x0, r6, 0x4007) 491.788661ms ago: executing program 1 (id=554): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000001480)=0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r3, 0x0, 0x7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r10], 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r12, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x9004) ioctl$sock_bt_hci(r11, 0x400448e6, 0x0) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 418.384389ms ago: executing program 1 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_delneigh={0x0, 0x1d, 0x8, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x0, 0x0, r3, 0x2, 0x2}, [@NDA_SRC_VNI={0x0, 0xb, 0xffff}, @NDA_SRC_VNI={0x0, 0xb, 0xf67}, @NDA_FDB_EXT_ATTRS={0x0, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH, @NFEA_ACTIVITY_NOTIFY={0x0, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x0, 0x1, 0x8}, @NFEA_DONT_REFRESH]}, @NDA_PROBES={0x0, 0x4, 0x6}, @NDA_LINK_NETNSID={0x0, 0xa, 0x39}, @NDA_DST_MAC={0x0, 0x1, @remote}, @NDA_PROBES={0x0, 0x4, 0x5}, @NDA_DST_MAC={0x0, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r5, 0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)='security.selinux\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r9, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x7) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x56b6) dup(0xffffffffffffffff) 318.328539ms ago: executing program 1 (id=556): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>\t\t') 240.913376ms ago: executing program 1 (id=557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff67, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x62af, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xd, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x32}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x89) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x41015500, &(0x7f0000000440)=0xfffffffd) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa00aaaaaa0180c2a200eedd6c09000028000000000006906564010101ac1414c500004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) ioctl$TIOCGPTLCK(r7, 0x80045439, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000012c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000011c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040004) 237.051587ms ago: executing program 3 (id=558): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$eJzs3d9r2+YawPFHaUJSF8rhnEMpIWnfpudACqmPbLcpppwLTX7tvK0sGUkuyVUJjVNCnW40Gyy5Gb3pNtj+iN7ujxj7h8pud5chyW6dX1ZIUzuE78e072vpsd5HstGDYksSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAglluz7ZIlnvHbq+pkbi0MmkPm95d370AzZFwRK/knMzNyM5t089+fZt9I/luQuezZnMwkzYzsXbvxj8f/mpzov35IQiOxs7v3ar3b7bwZdyJj0tC+iQLTdBpamShQ1asislKPVN14OlqLYt1UbqidOAjVontPlarVitLFtaDtN2qOp/sTH90v2/ayelJsaSeMAv9/T4qRu2I8z/iNNCaZncQ8Sj6IT02sYu00ldrc6nYqeUkmQaXTBJXzgsp2uVwqlcul5YfVh49se/LIBPsQORIx/g8txuuc9+DA2U306r94YsSXtqyKOvbhSk1CCaR5wvyefv3/7/TwcQfrf7/K3/w0e1bS+n8re3brpPp/Qi6je+zIruzJK1mXrnSlI2/GntFoHw3R4ouRSAIx0hQnnaJ6U5RUZVmWxZbnsiJ1iURJXYx4oiWSNYkkFp1+olwJRYsjsQQSipJFceWeKCnJ/nRVKqJES1HWJJC2+NKQmjjpUjZlK93ulSE5fgwqnSaoPCSI+o/Pd+77cOCs9vv1HwAAAAAAXFpW+tf35Ph/SuZFpiypG0/b404LAAAAAACco/Sb/7mkmUp682Jx/A8AAAAAwGVjpefYWSJSkNtZr38mFH8EAAAAAADgkki//7+VNIWkd1ssjv8BAAAAALhsfupffXfi0DV2/0inWpZErWnr9z8lDKest63V/1jbTjLD2b6Sve7K4SXG9Vnrem8habM82Xvm6jmrd/XLjxfB/NBrNvOu9W+dQwLyi9zJYu5sZO1Gf042SqFuPF10A+9xSRzn+kSsV+PvXm99L+nq/+w3r1uyudXtFF983d1Ic3mbLOXtdu8Cikeuozgkl29lPouZP36Np9ITMXrjFrJx7cH1n+i/cacf850sZDELhawtHFz/mWTMUvFxfz0OrX2WxfSMyGet+Tu5m8XcXbybNcdkUS6e9B70tkV5cPufaVucIotKXhaVvCyu/X9oFgAwLps5Vcg6WvjPsK8dTXV/J4tZzOJsumOdnD1mj27n7dHtz6zrvx25B9LxNbaUjvtrMu4PstXtlNJx3ycveH/iuJFXtkQmRfa3v5EbO7t797e21192XnZel8uVZfuBbT8sy9Tm1mTHTppux6b2AACOkX+PndwI60HOUfU/P/6koCgvRP7a39+QpfRsg/QXB8cutTDwM4SlnKPWwsAdXpZyjuoKAzd6OX1sZQTvBAAAo7OQU4dPU/+Xco67D9by4UfHg7UcAAB8GTr8YBXiH60wNK3npWq15MQrWoWB+1SFptbQyvixDt0Vx29o1QqDOHADL+k8MzUdqajdagVhrOpBqFpBZFbTO7+r3q3fI910/Ni4UcvTTqSVG/ix48aqZiJXtdpfeSZa0WH64qilXVM3rhObwFdR0A5dXVQq0nog0NS0H5u6Sbq+aoWm6YRr6lngtZta1XTkhqYVB9kC+2MZvx6EzXSxxXFvbAAALoid3b1X691u580X7Ix7HQEAwEFUaQAAAAAAAAAAAAAAAAAAAAAALr78E/iujuQcwYvVmb4YaYy7M3Ex0sg6M4Mf2wuQz7l1LLkQaRzujG+fBGA0/g4AAP//CXJN1A==") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 152.328315ms ago: executing program 4 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_vs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000dc95b6e639a934228f2e6ea7f8c86fa12361838baefdbcde56dffdd1c6bfdd82a0c38dcdcb39e8ab0c0f1f47c2e938569abe7aa4481b6010d0943ce2fc21e4e54c377b814b94be64690326d5e03f0b66edfebf2073fb26cc851ce367f0c86f39e48e50afb2b84d614af3878ec9b86e6422d6d03471eaac4e470743313b3b975745"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) write$qrtrtun(r4, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 131.090717ms ago: executing program 3 (id=561): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) r7 = socket(0x200000100000011, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x14, r6, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x40040) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0x1}, 0x18) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x18) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 49.314516ms ago: executing program 4 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=563): memfd_create(&(0x7f0000000000)='-\x00', 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x11, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x1ffc, 0x200000001, 'nq\x00', 0x9, 0x821}, 0x2c) write$binfmt_elf32(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") socket$kcm(0x29, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) close(r6) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x84001, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): 73][ T4251] bridge0: port 3(macsec1) entered blocking state [ 68.926516][ T4251] bridge0: port 3(macsec1) entered disabled state [ 68.933927][ T4251] macsec1: entered allmulticast mode [ 68.939410][ T4251] bridge0: entered allmulticast mode [ 68.949543][ T4251] macsec1: left allmulticast mode [ 68.954622][ T4251] bridge0: left allmulticast mode [ 68.960837][ T4246] syz.0.161: attempt to access beyond end of device [ 68.960837][ T4246] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 68.975950][ T4251] bridge0: left promiscuous mode [ 68.984386][ T4246] syz.0.161: attempt to access beyond end of device [ 68.984386][ T4246] loop0: rw=0, sector=4600, nr_sectors = 4 limit=128 [ 69.006445][ T4248] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.026898][ T29] audit: type=1326 audit(1763154353.884:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 69.057529][ T4248] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.087027][ T29] audit: type=1326 audit(1763154353.904:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 69.110531][ T29] audit: type=1326 audit(1763154353.904:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 69.124374][ T4248] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.190314][ T4255] lo speed is unknown, defaulting to 1000 [ 69.200854][ T4255] lo speed is unknown, defaulting to 1000 [ 69.208616][ T4266] loop0: detected capacity change from 0 to 8192 [ 69.215077][ T4255] lo speed is unknown, defaulting to 1000 [ 69.223376][ T4255] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.255348][ T4255] lo speed is unknown, defaulting to 1000 [ 69.264969][ T4255] lo speed is unknown, defaulting to 1000 [ 69.272342][ T4255] lo speed is unknown, defaulting to 1000 [ 69.279135][ T4255] lo speed is unknown, defaulting to 1000 [ 69.285731][ T4255] lo speed is unknown, defaulting to 1000 [ 69.291817][ T4255] lo speed is unknown, defaulting to 1000 [ 69.339098][ T4272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 69.352653][ T4271] loop1: detected capacity change from 0 to 512 [ 69.376523][ T4271] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.384140][ T4271] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 69.421924][ T4271] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 69.430742][ T4271] EXT4-fs (loop1): 1 truncate cleaned up [ 69.445098][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.478414][ T4277] loop3: detected capacity change from 0 to 512 [ 69.519360][ T4277] EXT4-fs: Ignoring removed bh option [ 69.537858][ T4277] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 69.549303][ T4281] netlink: 48 bytes leftover after parsing attributes in process `syz.2.174'. [ 69.604375][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.667795][ T4281] wg1 speed is unknown, defaulting to 1000 [ 69.685356][ T4281] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.730990][ T4293] loop4: detected capacity change from 0 to 1024 [ 69.736354][ T4286] loop3: detected capacity change from 0 to 128 [ 69.766090][ T4294] loop0: detected capacity change from 0 to 128 [ 69.781072][ T4294] FAT-fs (loop0): Directory bread(block 32) failed [ 69.787914][ T4294] FAT-fs (loop0): Directory bread(block 33) failed [ 69.794733][ T4294] FAT-fs (loop0): Directory bread(block 34) failed [ 69.798280][ T4293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.810049][ T4294] FAT-fs (loop0): Directory bread(block 35) failed [ 69.820999][ T4294] FAT-fs (loop0): Directory bread(block 36) failed [ 69.827682][ T4294] FAT-fs (loop0): Directory bread(block 37) failed [ 69.834263][ T4294] FAT-fs (loop0): Directory bread(block 38) failed [ 69.840916][ T4294] FAT-fs (loop0): Directory bread(block 39) failed [ 69.847538][ T4294] FAT-fs (loop0): Directory bread(block 40) failed [ 69.854109][ T4294] FAT-fs (loop0): Directory bread(block 41) failed [ 69.859292][ T4281] lo speed is unknown, defaulting to 1000 [ 69.875007][ T4289] siw: device registration error -23 [ 69.911631][ T4286] FAT-fs (loop3): Directory bread(block 32) failed [ 69.945963][ T4286] FAT-fs (loop3): Directory bread(block 33) failed [ 69.959986][ T4286] FAT-fs (loop3): Directory bread(block 34) failed [ 69.963846][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.975769][ T4286] FAT-fs (loop3): Directory bread(block 35) failed [ 69.976545][ T4286] FAT-fs (loop3): Directory bread(block 36) failed [ 70.009896][ T4301] loop1: detected capacity change from 0 to 2048 [ 70.017046][ T4286] FAT-fs (loop3): Directory bread(block 37) failed [ 70.025185][ T4286] FAT-fs (loop3): Directory bread(block 38) failed [ 70.032357][ T4286] FAT-fs (loop3): Directory bread(block 39) failed [ 70.039869][ T4286] FAT-fs (loop3): Directory bread(block 40) failed [ 70.049470][ T4286] FAT-fs (loop3): Directory bread(block 41) failed [ 70.060234][ T3303] Alternate GPT is invalid, using primary GPT. [ 70.066731][ T3303] loop1: p2 p3 p7 [ 70.104355][ T4305] loop0: detected capacity change from 0 to 1024 [ 70.123438][ T4307] xt_hashlimit: size too large, truncated to 1048576 [ 70.124335][ T4301] Alternate GPT is invalid, using primary GPT. [ 70.136727][ T4301] loop1: p2 p3 p7 [ 70.141061][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.149820][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.257290][ T4305] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 70.281431][ T4312] loop4: detected capacity change from 0 to 512 [ 70.534095][ T4312] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.182: iget: bad extra_isize 90 (inode size 256) [ 70.739078][ T4286] syz.3.177: attempt to access beyond end of device [ 70.739078][ T4286] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 70.772639][ T4312] EXT4-fs (loop4): Remounting filesystem read-only [ 70.793208][ T4312] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 70.806587][ T4286] syz.3.177: attempt to access beyond end of device [ 70.806587][ T4286] loop3: rw=0, sector=4600, nr_sectors = 4 limit=128 [ 70.822436][ T4312] EXT4-fs (loop4): 1 orphan inode deleted [ 70.824210][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 70.840352][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 70.851756][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.022847][ T4320] ip6_vti0 speed is unknown, defaulting to 1000 [ 71.078845][ T4320] lo speed is unknown, defaulting to 1000 [ 71.334991][ T4328] netlink: 'syz.0.188': attribute type 13 has an invalid length. [ 71.502176][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 71.607317][ T4338] netlink: 'syz.3.190': attribute type 6 has an invalid length. [ 71.651154][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 71.651168][ T29] audit: type=1326 audit(1763154356.484:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b62ad6567 code=0x7ffc0000 [ 71.680779][ T29] audit: type=1326 audit(1763154356.484:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b62a7b789 code=0x7ffc0000 [ 71.704142][ T29] audit: type=1326 audit(1763154356.484:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 71.704857][ T4342] infiniband syz0: set down [ 71.727685][ T29] audit: type=1326 audit(1763154356.484:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 71.727724][ T29] audit: type=1326 audit(1763154356.484:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 71.727756][ T29] audit: type=1326 audit(1763154356.494:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b62ad6567 code=0x7ffc0000 [ 71.727799][ T29] audit: type=1326 audit(1763154356.494:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b62a7b789 code=0x7ffc0000 [ 71.727906][ T29] audit: type=1326 audit(1763154356.494:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 71.727938][ T29] audit: type=1326 audit(1763154356.504:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b62ad6567 code=0x7ffc0000 [ 71.732983][ T4342] infiniband syz0: added veth1_to_batadv [ 71.755847][ T29] audit: type=1326 audit(1763154356.504:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b62a7b789 code=0x7ffc0000 [ 71.926876][ T4342] RDS/IB: syz0: added [ 71.930936][ T4342] smc: adding ib device syz0 with port count 1 [ 71.948248][ T4342] smc: ib device syz0 port 1 has no pnetid [ 72.012520][ T4348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.058994][ T4348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.071716][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 72.119461][ T4349] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 72.131331][ T4348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.142912][ T160] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.274538][ T4353] loop0: detected capacity change from 0 to 128 [ 72.312027][ T4353] FAT-fs (loop0): Directory bread(block 32) failed [ 72.339752][ T4353] FAT-fs (loop0): Directory bread(block 33) failed [ 72.348644][ T4353] FAT-fs (loop0): Directory bread(block 34) failed [ 72.358873][ T4353] FAT-fs (loop0): Directory bread(block 35) failed [ 72.385038][ T4353] FAT-fs (loop0): Directory bread(block 36) failed [ 72.393188][ T4353] FAT-fs (loop0): Directory bread(block 37) failed [ 72.401154][ T4353] FAT-fs (loop0): Directory bread(block 38) failed [ 72.408789][ T4353] FAT-fs (loop0): Directory bread(block 39) failed [ 72.419414][ T4353] FAT-fs (loop0): Directory bread(block 40) failed [ 72.426823][ T4353] FAT-fs (loop0): Directory bread(block 41) failed [ 72.492834][ T4357] loop3: detected capacity change from 0 to 1024 [ 72.510474][ T4357] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 72.573635][ T4353] syz.0.196: attempt to access beyond end of device [ 72.573635][ T4353] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 72.588457][ T4353] syz.0.196: attempt to access beyond end of device [ 72.588457][ T4353] loop0: rw=0, sector=4600, nr_sectors = 4 limit=128 [ 72.615906][ T4358] loop3: detected capacity change from 0 to 1024 [ 72.625630][ T4358] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.637675][ T4358] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.645865][ T4358] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.652529][ T4358] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 72.667219][ T4358] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 72.674137][ T4358] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.198: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.687994][ T4358] EXT4-fs (loop3): 1 orphan inode deleted [ 72.694093][ T4358] EXT4-fs mount: 2 callbacks suppressed [ 72.694111][ T4358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.715270][ T4358] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.198: iget: bad extended attribute block 6 [ 72.720241][ T4361] siw: device registration error -23 [ 72.733648][ T4358] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 72.743415][ T4358] SELinux: failed to load policy [ 72.774695][ T4364] tmpfs: Bad value for 'mpol' [ 72.841939][ T4366] loop4: detected capacity change from 0 to 164 [ 72.849776][ T4366] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 72.869728][ T4366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4366 comm=syz.4.201 [ 73.094748][ T4378] loop0: detected capacity change from 0 to 8192 [ 73.101820][ T4378] msdos: Unknown parameter 'ù‡U©À¶Ö¾7Þg¡ [ 73.101820][ T4378] À†9JòWÃØAmFU½•`^sd”?¶VÐ/Dè“Ýd‹œWÞÄÕ›¥ ÕÒÞNß{¢¬î­>¼ßqõ÷¶äby&ýÿºf>`ê% J^PeUUXuºt _ÃøOëdŽ9g_Þê3é}‡éX' [ 73.241981][ T4385] loop2: detected capacity change from 0 to 512 [ 73.259296][ T4385] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.284718][ T4385] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 73.292922][ T4385] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 73.301835][ T4385] EXT4-fs (loop2): 1 truncate cleaned up [ 73.308563][ T4385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.331454][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.344724][ T4380] bridge0: port 3(erspan0) entered blocking state [ 73.351384][ T4380] bridge0: port 3(erspan0) entered disabled state [ 73.369447][ T4389] loop0: detected capacity change from 0 to 512 [ 73.386411][ T4380] erspan0: entered allmulticast mode [ 73.390030][ T4389] EXT4-fs: Ignoring removed bh option [ 73.393771][ T4380] erspan0: entered promiscuous mode [ 73.415424][ T4389] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 73.416980][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.560872][ T4403] loop2: detected capacity change from 0 to 1024 [ 73.586248][ T4403] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.605852][ T4403] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.213: iget: bogus i_mode (1) [ 73.625729][ T4403] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.213: couldn't read orphan inode 11 (err -117) [ 73.669066][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.695069][ T4348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.705609][ T4348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 73.812963][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 73.818235][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'. [ 73.821465][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 73.840295][ T4414] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.858019][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 73.866423][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 73.876492][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 73.878631][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 73.893584][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 73.918839][ T4416] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.939466][ T4416] batman_adv: batadv0: Adding interface: dummy0 [ 73.945790][ T4416] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.971239][ T4416] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 74.025306][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 74.033692][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 74.143725][ T4422] loop4: detected capacity change from 0 to 8192 [ 74.159776][ T4422] msdos: Unknown parameter 'ù‡U©À¶Ö¾7Þg¡ [ 74.159776][ T4422] À†9JòWÃØAmFU½•`^sd”?¶VÐ/Dè“Ýd‹œWÞÄÕ›¥ ÕÒÞNß{¢¬î­>¼ßqõ÷¶äby&ýÿºf>`ê% J^PeUUXuºt _ÃøOëdŽ9g_Þê3é}‡éX' [ 74.190676][ T4419] loop1: detected capacity change from 0 to 128 [ 74.210247][ T4419] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.233731][ T4419] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.267439][ T4428] loop3: detected capacity change from 0 to 164 [ 74.274680][ T4429] loop4: detected capacity change from 0 to 1024 [ 74.289701][ T4428] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 74.307708][ T4429] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 74.346885][ T4428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4428 comm=syz.3.229 [ 74.439244][ T4434] loop2: detected capacity change from 0 to 164 [ 74.446172][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.460453][ T4435] loop4: detected capacity change from 0 to 1024 [ 74.467732][ T4435] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.479123][ T4435] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.487373][ T4435] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.494435][ T4435] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 74.509271][ T4435] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 74.516224][ T4435] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.219: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.529799][ T4435] EXT4-fs (loop4): 1 orphan inode deleted [ 74.536003][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.551276][ T4435] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.219: iget: bad extended attribute block 6 [ 74.566218][ T4435] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 74.575848][ T4435] SELinux: failed to load policy [ 74.644775][ T4444] loop1: detected capacity change from 0 to 512 [ 74.650473][ T4446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.225'. [ 74.662092][ T4444] EXT4-fs: Ignoring removed bh option [ 74.668298][ T160] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.688104][ T4444] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 74.766592][ T4454] loop1: detected capacity change from 0 to 164 [ 74.787845][ T4454] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 74.814845][ T4454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4454 comm=syz.1.226 [ 74.886930][ T4456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.227'. [ 74.907056][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 74.915978][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 74.935240][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 74.965471][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 74.974361][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 74.994201][ T4459] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.015587][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 75.030640][ T4434] netlink: 'syz.2.220': attribute type 13 has an invalid length. [ 75.043549][ T4434] gretap0: refused to change device tx_queue_len [ 75.054369][ T4434] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.070159][ T1036] lo speed is unknown, defaulting to 1000 [ 75.075934][ T1036] s{z2: Port: 1 Link ACTIVE [ 75.095527][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 75.104598][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 75.114129][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.187648][ T4467] loop4: detected capacity change from 0 to 128 [ 75.268752][ T4471] syz.4.231: attempt to access beyond end of device [ 75.268752][ T4471] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 75.283563][ T4471] syz.4.231: attempt to access beyond end of device [ 75.283563][ T4471] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 75.301173][ T4471] syz.4.231: attempt to access beyond end of device [ 75.301173][ T4471] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 75.316079][ T4471] syz.4.231: attempt to access beyond end of device [ 75.316079][ T4471] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 75.340796][ T4471] syz.4.231: attempt to access beyond end of device [ 75.340796][ T4471] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 75.367435][ T4471] syz.4.231: attempt to access beyond end of device [ 75.367435][ T4471] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 75.494381][ T4480] loop4: detected capacity change from 0 to 128 [ 75.505533][ T4477] loop2: detected capacity change from 0 to 1024 [ 75.513217][ T4477] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 75.617296][ T4486] ip6_vti0 speed is unknown, defaulting to 1000 [ 75.653700][ T4486] lo speed is unknown, defaulting to 1000 [ 75.689147][ T4487] siw: device registration error -23 [ 75.745757][ T4489] loop4: detected capacity change from 0 to 164 [ 75.756743][ T4489] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 75.773231][ T4489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4489 comm=syz.4.238 [ 76.049614][ T4498] loop4: detected capacity change from 0 to 512 [ 76.057432][ T4498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.077008][ T4498] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.085403][ T4498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.095495][ T4498] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 76.107487][ T4498] EXT4-fs (loop4): Remounting filesystem read-only [ 76.114393][ T4498] EXT4-fs (loop4): 1 truncate cleaned up [ 76.447248][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.457917][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.468927][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.479976][ T4498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.492899][ T4498] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.551951][ T4495] ip6_vti0 speed is unknown, defaulting to 1000 [ 76.591184][ T4495] lo speed is unknown, defaulting to 1000 [ 76.597811][ T4498] netlink: '+}[@': attribute type 13 has an invalid length. [ 76.625144][ T4498] bridge0: port 3(erspan0) entered blocking state [ 76.631683][ T4498] bridge0: port 3(erspan0) entered forwarding state [ 76.640571][ T4498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.663294][ T4498] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.670504][ T4511] netlink: 'syz.2.244': attribute type 6 has an invalid length. [ 76.671149][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 76.671165][ T29] audit: type=1326 audit(1763154361.504:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c1d456567 code=0x7ffc0000 [ 76.686013][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.708288][ T29] audit: type=1326 audit(1763154361.504:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c1d3fb789 code=0x7ffc0000 [ 76.737535][ T29] audit: type=1326 audit(1763154361.504:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9c1d45f6c9 code=0x7ffc0000 [ 76.761248][ T29] audit: type=1326 audit(1763154361.504:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c1d456567 code=0x7ffc0000 [ 76.784615][ T29] audit: type=1326 audit(1763154361.504:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c1d3fb789 code=0x7ffc0000 [ 76.808034][ T29] audit: type=1326 audit(1763154361.504:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9c1d45f6c9 code=0x7ffc0000 [ 76.831515][ T29] audit: type=1326 audit(1763154361.524:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c1d456567 code=0x7ffc0000 [ 76.855180][ T29] audit: type=1326 audit(1763154361.524:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c1d3fb789 code=0x7ffc0000 [ 76.878572][ T29] audit: type=1326 audit(1763154361.524:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9c1d45f6c9 code=0x7ffc0000 [ 76.904777][ T29] audit: type=1326 audit(1763154361.544:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c1d456567 code=0x7ffc0000 [ 76.928574][ T4498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.055527][ T4514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.056612][ T4524] Zero length message leads to an empty skb [ 77.065493][ T4514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 77.127638][ T4514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.137841][ T4514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 77.187999][ T4530] loop4: detected capacity change from 0 to 2048 [ 77.211029][ T4527] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.219408][ T4514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.229393][ T4514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 77.240099][ T4530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.258902][ T4530] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.285914][ T4530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.299793][ T4530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.327633][ T4514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.337662][ T4514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 77.353053][ T4527] lo speed is unknown, defaulting to 1000 [ 77.431564][ T4538] loop2: detected capacity change from 0 to 2048 [ 77.446876][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.459270][ T4538] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.526235][ T4543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.537723][ T4543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.552038][ T4543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.251: bg 0: block 345: padding at end of block bitmap is not set [ 77.584875][ T4543] EXT4-fs (loop2): Remounting filesystem read-only [ 77.604719][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 77.613102][ T31] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 77.675511][ T4533] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 77.700542][ T4533] EXT4-fs (loop4): Remounting filesystem read-only [ 77.706354][ T4514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.717099][ T4514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 77.909880][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.934840][ T4556] loop4: detected capacity change from 0 to 512 [ 77.958754][ T4556] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.257: bg 0: block 248: padding at end of block bitmap is not set [ 77.974263][ T4556] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.257: Failed to acquire dquot type 1 [ 77.987311][ T4556] EXT4-fs (loop4): 1 truncate cleaned up [ 77.993350][ T4556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.006398][ T4556] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.051311][ T4559] loop3: detected capacity change from 0 to 128 [ 78.094491][ T4559] FAT-fs (loop3): Directory bread(block 32) failed [ 78.102276][ T4559] FAT-fs (loop3): Directory bread(block 33) failed [ 78.111529][ T4559] FAT-fs (loop3): Directory bread(block 34) failed [ 78.119021][ T4559] FAT-fs (loop3): Directory bread(block 35) failed [ 78.128101][ T4559] FAT-fs (loop3): Directory bread(block 36) failed [ 78.135821][ T4559] FAT-fs (loop3): Directory bread(block 37) failed [ 78.143390][ T4559] FAT-fs (loop3): Directory bread(block 38) failed [ 78.151382][ T4559] FAT-fs (loop3): Directory bread(block 39) failed [ 78.159024][ T4559] FAT-fs (loop3): Directory bread(block 40) failed [ 78.166550][ T4559] FAT-fs (loop3): Directory bread(block 41) failed [ 78.167748][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.203451][ T4566] loop4: detected capacity change from 0 to 2048 [ 78.230467][ T4566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.247042][ T4566] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.280380][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.316557][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.346696][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.386411][ T4569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.258: bg 0: block 345: padding at end of block bitmap is not set [ 78.403022][ T4569] EXT4-fs (loop4): Remounting filesystem read-only [ 78.453037][ T4559] bio_check_eod: 116 callbacks suppressed [ 78.453169][ T4559] syz.3.267: attempt to access beyond end of device [ 78.453169][ T4559] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 78.474354][ T4559] syz.3.267: attempt to access beyond end of device [ 78.474354][ T4559] loop3: rw=0, sector=4600, nr_sectors = 4 limit=128 [ 78.636502][ T4576] loop0: detected capacity change from 0 to 1024 [ 78.638093][ T4578] xt_hashlimit: max too large, truncated to 1048576 [ 78.651291][ T4576] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 78.669407][ T4578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.732912][ T4580] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.740370][ T4580] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.022185][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.109203][ T4589] loop4: detected capacity change from 0 to 2048 [ 79.126734][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.138956][ T4589] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.217972][ T4594] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.268: bg 0: block 345: padding at end of block bitmap is not set [ 79.232898][ T4594] EXT4-fs (loop4): Remounting filesystem read-only [ 79.266757][ T4593] loop2: detected capacity change from 0 to 128 [ 79.307697][ T4593] FAT-fs (loop2): Directory bread(block 32) failed [ 79.318155][ T4593] FAT-fs (loop2): Directory bread(block 33) failed [ 79.328389][ T4593] FAT-fs (loop2): Directory bread(block 34) failed [ 79.338860][ T4593] FAT-fs (loop2): Directory bread(block 35) failed [ 79.346365][ T4593] FAT-fs (loop2): Directory bread(block 36) failed [ 79.353143][ T4593] FAT-fs (loop2): Directory bread(block 37) failed [ 79.360213][ T4593] FAT-fs (loop2): Directory bread(block 38) failed [ 79.366997][ T4593] FAT-fs (loop2): Directory bread(block 39) failed [ 79.373724][ T4593] FAT-fs (loop2): Directory bread(block 40) failed [ 79.380667][ T4593] FAT-fs (loop2): Directory bread(block 41) failed [ 79.448286][ T4593] syz.2.269: attempt to access beyond end of device [ 79.448286][ T4593] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 79.461975][ T4593] syz.2.269: attempt to access beyond end of device [ 79.461975][ T4593] loop2: rw=0, sector=4600, nr_sectors = 4 limit=128 [ 79.523928][ T4597] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 79.530484][ T4597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.538193][ T4597] vhci_hcd vhci_hcd.0: Device attached [ 79.610543][ T4601] SELinux: policydb version 704780991 does not match my version range 15-35 [ 79.622963][ T4601] SELinux: failed to load policy [ 79.629900][ T4598] vhci_hcd: connection closed [ 79.630044][ T160] vhci_hcd: stop threads [ 79.639171][ T160] vhci_hcd: release socket [ 79.643631][ T160] vhci_hcd: disconnect device [ 79.746530][ T4608] __nla_validate_parse: 8 callbacks suppressed [ 79.746551][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 79.874258][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.934957][ T4610] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 79.961553][ T4610] bond1: entered promiscuous mode [ 79.975513][ T4610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.006016][ T4615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.013317][ T4615] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 80.023902][ T4615] bond1: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 80.065353][ T4610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.072616][ T4610] IPv6: NLM_F_CREATE should be set when creating new route [ 80.079864][ T4610] IPv6: NLM_F_CREATE should be set when creating new route [ 80.096636][ T4615] bond1: (slave wireguard1): making interface the new active one [ 80.104453][ T4615] wireguard1: entered promiscuous mode [ 80.109710][ T4610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.134943][ T4615] bond1: (slave wireguard1): Enslaving as an active interface with an up link [ 80.150835][ T4610] bond1: (slave wireguard2): The slave device specified does not support setting the MAC address [ 80.197333][ T4610] bond1: (slave wireguard2): Enslaving as a backup interface with an up link [ 80.218448][ T4621] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.256719][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 80.280114][ T4622] macsec1: entered allmulticast mode [ 80.285508][ T4622] bridge0: entered allmulticast mode [ 80.301670][ T4622] bridge0: port 1(macsec1) entered blocking state [ 80.308285][ T4622] bridge0: port 1(macsec1) entered disabled state [ 80.326302][ T4622] bridge0: left allmulticast mode [ 80.339819][ T4621] lo speed is unknown, defaulting to 1000 [ 80.378689][ T4629] loop4: detected capacity change from 0 to 512 [ 80.397177][ T4629] SELinux: security_context_str_to_sid () failed with errno=-22 [ 80.451363][ T4634] loop4: detected capacity change from 0 to 1024 [ 80.465636][ T4634] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 80.513376][ T4636] loop2: detected capacity change from 0 to 512 [ 80.521605][ T4636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.552263][ T4636] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.282: invalid indirect mapped block 4294967295 (level 1) [ 80.568742][ T4636] EXT4-fs (loop2): Remounting filesystem read-only [ 80.575751][ T4636] EXT4-fs (loop2): 2 truncates cleaned up [ 80.582324][ T4636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.689089][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.714783][ T4621] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.726007][ T4621] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.783588][ T4645] loop2: detected capacity change from 0 to 2048 [ 80.806974][ T4645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.823500][ T4645] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.891300][ T4648] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.284: bg 0: block 345: padding at end of block bitmap is not set [ 80.906075][ T4648] EXT4-fs (loop2): Remounting filesystem read-only [ 80.983138][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 81.218142][ T4654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 81.254281][ T4656] loop1: detected capacity change from 0 to 128 [ 81.309237][ T4660] loop4: detected capacity change from 0 to 1024 [ 81.343758][ T4661] syz.1.287: attempt to access beyond end of device [ 81.343758][ T4661] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 81.359107][ T4661] syz.1.287: attempt to access beyond end of device [ 81.359107][ T4661] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 81.376873][ T4661] syz.1.287: attempt to access beyond end of device [ 81.376873][ T4661] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 81.377159][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.390468][ T4661] syz.1.287: attempt to access beyond end of device [ 81.390468][ T4661] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 81.416641][ T4661] syz.1.287: attempt to access beyond end of device [ 81.416641][ T4661] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 81.430475][ T4661] syz.1.287: attempt to access beyond end of device [ 81.430475][ T4661] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 81.476116][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.566131][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.614492][ T4674] loop4: detected capacity change from 0 to 2048 [ 81.646894][ T4674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.675436][ T29] kauditd_printk_skb: 1216 callbacks suppressed [ 81.675454][ T29] audit: type=1326 audit(1763154366.534:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.677008][ T4674] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.681820][ T29] audit: type=1326 audit(1763154366.534:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.743343][ T4681] tmpfs: Bad value for 'mpol' [ 81.806165][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.825275][ T4685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=4685 comm=syz.2.295 [ 81.829897][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.850791][ T29] audit: type=1326 audit(1763154366.594:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.874255][ T29] audit: type=1326 audit(1763154366.594:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.897696][ T29] audit: type=1326 audit(1763154366.604:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.921128][ T29] audit: type=1326 audit(1763154366.604:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.944490][ T29] audit: type=1326 audit(1763154366.614:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.967950][ T29] audit: type=1326 audit(1763154366.614:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 81.991299][ T29] audit: type=1326 audit(1763154366.624:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 82.014888][ T29] audit: type=1326 audit(1763154366.624:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b62b11f85 code=0x7ffc0000 [ 82.076452][ T4684] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.293: bg 0: block 345: padding at end of block bitmap is not set [ 82.117549][ T4684] EXT4-fs (loop4): Remounting filesystem read-only [ 82.203632][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 82.249354][ T4689] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.317179][ T4689] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.390908][ T4695] loop1: detected capacity change from 0 to 1024 [ 82.398570][ T4689] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.433292][ T4695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.501014][ T4689] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.555154][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.597093][ T160] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.628906][ T160] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645302][ T160] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.657296][ T4699] loop1: detected capacity change from 0 to 1024 [ 82.663873][ T160] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.738453][ T4702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 82.747459][ T4703] vlan2: entered promiscuous mode [ 82.752682][ T4703] vlan2: entered allmulticast mode [ 82.757875][ T4703] hsr_slave_1: entered allmulticast mode [ 82.784996][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 82.801744][ T4702] ip6_vti0 speed is unknown, defaulting to 1000 [ 82.815938][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 82.839342][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.939281][ T4702] lo speed is unknown, defaulting to 1000 [ 82.989593][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 83.197965][ T4714] loop3: detected capacity change from 0 to 164 [ 83.344322][ T4716] ip6_vti0 speed is unknown, defaulting to 1000 [ 83.403701][ T4716] lo speed is unknown, defaulting to 1000 [ 83.680465][ T4714] geneve2: entered promiscuous mode [ 83.778581][ T4726] loop3: detected capacity change from 0 to 512 [ 83.796892][ T4723] ip6_vti0 speed is unknown, defaulting to 1000 [ 83.920896][ T4726] SELinux: security_context_str_to_sid () failed with errno=-22 [ 83.935772][ T4723] lo speed is unknown, defaulting to 1000 [ 83.993080][ T4734] ip6t_srh: unknown srh match flags 4000 [ 84.069889][ T4737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.313'. [ 84.211352][ T4741] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.444117][ T4735] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.447507][ T4745] loop1: detected capacity change from 0 to 2048 [ 84.492818][ T4749] loop3: detected capacity change from 0 to 164 [ 84.503092][ T4745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.516109][ T4749] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 84.538569][ T4749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4749 comm=syz.3.315 [ 84.558667][ T4735] lo speed is unknown, defaulting to 1000 [ 84.715244][ T4745] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.818735][ T4754] netlink: 'syz.4.316': attribute type 13 has an invalid length. [ 84.846784][ T4757] hub 9-0:1.0: USB hub found [ 84.853770][ T4757] hub 9-0:1.0: 8 ports detected [ 84.867446][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.885104][ T4759] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.908227][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.922828][ T4763] raw_sendmsg: syz.4.319 forgot to set AF_INET. Fix it! [ 84.975312][ T4760] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.314: bg 0: block 345: padding at end of block bitmap is not set [ 85.008660][ T4767] __nla_validate_parse: 9 callbacks suppressed [ 85.008681][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 85.025286][ T4760] EXT4-fs (loop1): Remounting filesystem read-only [ 85.049053][ T4770] tipc: New replicast peer: 255.255.255.255 [ 85.055226][ T4770] tipc: Enabled bearer , priority 10 [ 85.061622][ T4769] futex_wake_op: syz.3.321 tries to shift op by -1; fix this program [ 85.061750][ T4759] lo speed is unknown, defaulting to 1000 [ 85.075926][ T4772] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.093770][ T4769] random: crng reseeded on system resumption [ 85.101542][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 85.117376][ T4772] smc: net device bond0 erased user defined pnetid SYZ0 [ 85.121585][ T4769] Restarting kernel threads ... [ 85.158249][ T4769] Done restarting kernel threads. [ 85.285667][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 85.365298][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 85.475469][ T4759] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.490898][ T4759] smc: net device bond0 erased user defined pnetid SYZ0 [ 85.686418][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.730140][ T4785] xt_hashlimit: max too large, truncated to 1048576 [ 85.738562][ T4785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.839330][ T4787] loop1: detected capacity change from 0 to 512 [ 85.873500][ T4787] vlan2: entered allmulticast mode [ 85.878730][ T4787] hsr0: entered allmulticast mode [ 85.883827][ T4787] hsr_slave_0: entered allmulticast mode [ 86.006584][ T4792] netlink: 'syz.0.327': attribute type 21 has an invalid length. [ 86.016860][ T4795] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 86.031579][ T4795] SELinux: Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped). [ 86.042896][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.059246][ T4795] 9pnet_fd: Insufficient options for proto=fd [ 86.081363][ T4797] netlink: 'syz.2.329': attribute type 13 has an invalid length. [ 86.109576][ T4801] loop0: detected capacity change from 0 to 512 [ 86.119496][ T4802] loop2: detected capacity change from 0 to 164 [ 86.129907][ T4801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.146861][ T4802] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 86.155955][ T4807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.333'. [ 86.165178][ T9] tipc: Node number set to 3849693755 [ 86.166338][ T4802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4802 comm=syz.2.332 [ 86.197461][ T4804] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 86.198471][ T4801] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.331: invalid indirect mapped block 4294967295 (level 1) [ 86.231027][ T4801] EXT4-fs (loop0): Remounting filesystem read-only [ 86.257573][ T4801] EXT4-fs (loop0): 2 truncates cleaned up [ 86.263263][ T4811] loop2: detected capacity change from 0 to 736 [ 86.269537][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.289467][ T4814] hub 1-0:1.0: USB hub found [ 86.295676][ T4811] rock: directory entry would overflow storage [ 86.301869][ T4811] rock: sig=0x3b10, size=4, remaining=3 [ 86.302605][ T4814] hub 1-0:1.0: 8 ports detected [ 86.343682][ T4813] loop1: detected capacity change from 0 to 4096 [ 86.359845][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.400925][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.416980][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.449475][ T4821] veth2: entered promiscuous mode [ 86.454564][ T4821] veth2: entered allmulticast mode [ 86.493689][ T4822] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.336'. [ 86.503688][ T4822] netlink: zone id is out of range [ 86.508955][ T4822] netlink: zone id is out of range [ 86.514437][ T4822] netlink: zone id is out of range [ 86.519859][ T4822] netlink: zone id is out of range [ 86.525033][ T4822] netlink: zone id is out of range [ 86.529738][ T4821] infiniband !yz!: set down [ 86.530199][ T4822] netlink: zone id is out of range [ 86.534678][ T4821] infiniband !yz!: added team_slave_0 [ 86.540199][ T4822] netlink: zone id is out of range [ 86.551186][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.335'. [ 86.557938][ T4822] netlink: zone id is out of range [ 86.568769][ T4827] loop1: detected capacity change from 0 to 512 [ 86.575957][ T4821] RDS/IB: !yz!: added [ 86.576010][ T4827] EXT4-fs: Ignoring removed orlov option [ 86.587329][ T4827] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 86.596027][ T4821] smc: adding ib device !yz! with port count 1 [ 86.597022][ T4827] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.336: corrupted in-inode xattr: e_value size too large [ 86.612555][ T4821] smc: ib device !yz! port 1 has no pnetid [ 86.616741][ T4827] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.336: couldn't read orphan inode 15 (err -117) [ 86.634857][ T4827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.674789][ T4822] netlink: set zone limit has 8 unknown bytes [ 86.686421][ T29] kauditd_printk_skb: 1636 callbacks suppressed [ 86.686434][ T29] audit: type=1400 audit(1763154371.544:5591): avc: denied { create } for pid=4829 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.736019][ T29] audit: type=1400 audit(1763154371.574:5592): avc: denied { setopt } for pid=4829 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.755501][ T29] audit: type=1400 audit(1763154371.574:5593): avc: denied { write } for pid=4829 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.774912][ T29] audit: type=1400 audit(1763154371.574:5594): avc: denied { connect } for pid=4829 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.794501][ T29] audit: type=1400 audit(1763154371.574:5595): avc: denied { name_connect } for pid=4829 comm="syz.2.338" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.816690][ T29] audit: type=1400 audit(1763154371.574:5596): avc: denied { shutdown } for pid=4829 comm="syz.2.338" lport=57563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.837382][ T29] audit: type=1400 audit(1763154371.574:5597): avc: denied { getopt } for pid=4829 comm="syz.2.338" lport=57563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.858059][ T29] audit: type=1400 audit(1763154371.574:5598): avc: denied { allowed } for pid=4829 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.877603][ T29] audit: type=1400 audit(1763154371.584:5599): avc: denied { create } for pid=4829 comm="syz.2.338" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.910017][ T29] audit: type=1326 audit(1763154371.714:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.0.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeb8af6c9 code=0x7ffc0000 [ 86.948719][ T4833] ip6t_srh: unknown srh match flags 4000 [ 87.026854][ T4839] netlink: 'syz.4.342': attribute type 13 has an invalid length. [ 87.046497][ T4840] netlink: 'syz.0.340': attribute type 1 has an invalid length. [ 87.072374][ T4840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.093481][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 87.104180][ T4843] ip6_vti0 speed is unknown, defaulting to 1000 [ 87.119439][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 87.120704][ T4840] bond1 (unregistering): Released all slaves [ 87.152235][ T4846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 87.162228][ T4843] lo speed is unknown, defaulting to 1000 [ 87.283000][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.320078][ T4849] loop1: detected capacity change from 0 to 512 [ 87.335679][ T4849] EXT4-fs: Ignoring removed bh option [ 87.377735][ T4851] loop2: detected capacity change from 0 to 164 [ 87.385511][ T4851] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 87.400008][ T4851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4851 comm=syz.2.345 [ 87.436244][ T4849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.450094][ T4849] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.467267][ T4849] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #18: comm syz.1.344: corrupted inode contents [ 87.503833][ T4859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4859 comm=syz.2.347 [ 87.516955][ T4849] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #18: comm syz.1.344: mark_inode_dirty error [ 87.535714][ T4860] IPVS: Unknown mcast interface: [ 87.541524][ T4849] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #18: comm syz.1.344: corrupted inode contents [ 87.646610][ T4864] ip6_vti0 speed is unknown, defaulting to 1000 [ 87.707777][ T4864] lo speed is unknown, defaulting to 1000 [ 88.092356][ T3574] Bluetooth: hci0: command 0x1003 tx timeout [ 88.098552][ T4448] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.169867][ T4862] loop2: detected capacity change from 0 to 128 [ 88.384384][ T4873] ip6t_srh: unknown srh match flags 4000 [ 88.416845][ T4874] loop3: detected capacity change from 0 to 128 [ 88.474908][ T4876] loop4: detected capacity change from 0 to 2048 [ 88.503244][ T4849] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #18: comm syz.1.344: mark_inode_dirty error [ 88.522208][ T4876] loop4: p3 < > p4 < > [ 88.526539][ T4876] loop4: partition table partially beyond EOD, truncated [ 88.557263][ T4874] FAT-fs (loop3): Directory bread(block 32) failed [ 88.563838][ T4874] FAT-fs (loop3): Directory bread(block 33) failed [ 88.578542][ T4876] loop4: p3 start 4284289 is beyond EOD, truncated [ 88.588528][ T4849] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #18: comm syz.1.344: mark inode dirty (error -117) [ 88.604636][ T4874] FAT-fs (loop3): Directory bread(block 34) failed [ 88.640184][ T4849] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 88.655317][ T4874] FAT-fs (loop3): Directory bread(block 35) failed [ 88.663201][ T4876] netlink: 'syz.4.353': attribute type 13 has an invalid length. [ 88.673009][ T4874] FAT-fs (loop3): Directory bread(block 36) failed [ 88.689874][ T4879] bio_check_eod: 8 callbacks suppressed [ 88.689892][ T4879] syz.2.348: attempt to access beyond end of device [ 88.689892][ T4879] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 88.725812][ T4878] netlink: 'syz.0.354': attribute type 5 has an invalid length. [ 88.735312][ T4874] FAT-fs (loop3): Directory bread(block 37) failed [ 88.752705][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.759152][ T4879] syz.2.348: attempt to access beyond end of device [ 88.759152][ T4879] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 88.767480][ T4874] FAT-fs (loop3): Directory bread(block 38) failed [ 88.777546][ T4879] syz.2.348: attempt to access beyond end of device [ 88.777546][ T4879] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 88.782857][ T4876] bridge0: port 3(erspan0) entered disabled state [ 88.809078][ T4879] syz.2.348: attempt to access beyond end of device [ 88.809078][ T4879] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 88.823154][ T4170] IPVS: starting estimator thread 0... [ 88.825595][ T4874] FAT-fs (loop3): Directory bread(block 39) failed [ 88.857996][ T4874] FAT-fs (loop3): Directory bread(block 40) failed [ 88.865103][ T4879] syz.2.348: attempt to access beyond end of device [ 88.865103][ T4879] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 88.885373][ T4874] FAT-fs (loop3): Directory bread(block 41) failed [ 88.899946][ T4879] syz.2.348: attempt to access beyond end of device [ 88.899946][ T4879] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 88.920405][ T4879] syz.2.348: attempt to access beyond end of device [ 88.920405][ T4879] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 88.933959][ T4879] syz.2.348: attempt to access beyond end of device [ 88.933959][ T4879] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 88.935446][ T4883] IPVS: using max 2208 ests per chain, 110400 per kthread [ 88.947697][ T4879] syz.2.348: attempt to access beyond end of device [ 88.947697][ T4879] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 88.968144][ T4879] syz.2.348: attempt to access beyond end of device [ 88.968144][ T4879] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 89.097350][ T4878] batman_adv: batadv0: Adding interface: vxlan0 [ 89.103638][ T4878] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.130014][ T4878] batman_adv: batadv0: Interface activated: vxlan0 [ 89.147036][ T4887] loop1: detected capacity change from 0 to 164 [ 89.160886][ T4887] netlink: 'syz.1.366': attribute type 13 has an invalid length. [ 89.181825][ T4889] xt_hashlimit: max too large, truncated to 1048576 [ 89.189538][ T4889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.206276][ T160] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.215143][ T160] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.224004][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.268755][ T4887] gretap0: refused to change device tx_queue_len [ 89.285456][ T4893] loop3: detected capacity change from 0 to 164 [ 89.292743][ T4887] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 89.308819][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.310026][ T4893] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 89.352936][ T4893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4893 comm=syz.3.357 [ 89.378909][ T4898] netlink: 'syz.4.361': attribute type 6 has an invalid length. [ 89.465279][ T4907] loop0: detected capacity change from 0 to 128 [ 89.485603][ T4909] loop1: detected capacity change from 0 to 164 [ 89.492081][ T4911] loop3: detected capacity change from 0 to 164 [ 89.573350][ T4900] loop2: detected capacity change from 0 to 4096 [ 89.610266][ T4900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.738301][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.866236][ T4921] netlink: 'syz.2.370': attribute type 21 has an invalid length. [ 89.881927][ T4928] loop4: detected capacity change from 0 to 128 [ 89.894139][ T4928] FAT-fs (loop4): Directory bread(block 32) failed [ 89.894719][ T4927] xt_hashlimit: max too large, truncated to 1048576 [ 89.901273][ T4928] FAT-fs (loop4): Directory bread(block 33) failed [ 89.914696][ T4928] FAT-fs (loop4): Directory bread(block 34) failed [ 89.921577][ T4928] FAT-fs (loop4): Directory bread(block 35) failed [ 89.932913][ T4927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.934181][ T4929] loop1: detected capacity change from 0 to 1024 [ 89.947898][ T4928] FAT-fs (loop4): Directory bread(block 36) failed [ 89.954914][ T4928] FAT-fs (loop4): Directory bread(block 37) failed [ 89.961899][ T4928] FAT-fs (loop4): Directory bread(block 38) failed [ 89.969638][ T4929] EXT4-fs: Ignoring removed orlov option [ 89.979443][ T4928] FAT-fs (loop4): Directory bread(block 39) failed [ 89.986414][ T4928] FAT-fs (loop4): Directory bread(block 40) failed [ 89.993685][ T4928] FAT-fs (loop4): Directory bread(block 41) failed [ 90.002108][ T4929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.086058][ T4924] program syz.1.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.103493][ T4935] loop0: detected capacity change from 0 to 164 [ 90.114813][ T4911] netlink: 'syz.3.367': attribute type 13 has an invalid length. [ 90.131783][ T4935] netlink: 'syz.0.374': attribute type 13 has an invalid length. [ 90.148593][ T4911] gretap0: refused to change device tx_queue_len [ 90.173558][ T4935] gretap0: refused to change device tx_queue_len [ 90.213189][ T4942] netlink: 'syz.2.377': attribute type 13 has an invalid length. [ 90.231926][ T4944] loop0: detected capacity change from 0 to 164 [ 90.256571][ T4944] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 90.274542][ T4946] netlink: 'syz.2.380': attribute type 7 has an invalid length. [ 90.282433][ T4946] __nla_validate_parse: 3 callbacks suppressed [ 90.282451][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 90.288656][ T4944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=4944 comm=syz.0.378 [ 90.339358][ T4946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.380'. [ 90.353284][ T4948] loop4: detected capacity change from 0 to 2048 [ 90.366493][ T4946] loop2: detected capacity change from 0 to 1024 [ 90.374130][ T4946] EXT4-fs: Ignoring removed bh option [ 90.379874][ T4946] EXT4-fs: inline encryption not supported [ 90.387292][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.399980][ T4948] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.411036][ T4946] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.425482][ T4946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.433297][ T4952] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 90.453291][ T4946] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.380: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.494781][ T4946] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.380: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.514281][ T4952] bond1: entered promiscuous mode [ 90.519999][ T4954] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.379: bg 0: block 345: padding at end of block bitmap is not set [ 90.535288][ T4952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.543441][ T4946] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.380: Failed to acquire dquot type 0 [ 90.555440][ T4954] EXT4-fs (loop4): Remounting filesystem read-only [ 90.562617][ T4957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.578220][ T4957] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 90.588822][ T4957] bond1: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 90.607466][ T4952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.614837][ T4952] IPv6: NLM_F_CREATE should be set when creating new route [ 90.622173][ T4952] IPv6: NLM_F_CREATE should be set when creating new route [ 90.631927][ T4946] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 90.642309][ T4946] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.380: mark_inode_dirty error [ 90.649228][ T4952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.655049][ T4946] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 90.672255][ T4946] EXT4-fs (loop2): 1 orphan inode deleted [ 90.674045][ T4957] bond1: (slave wireguard1): making interface the new active one [ 90.682265][ T4946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.685838][ T4957] wireguard1: entered promiscuous mode [ 90.688363][ T4957] bond1: (slave wireguard1): Enslaving as an active interface with an up link [ 90.712721][ T3483] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.746175][ T4952] bond1: (slave wireguard2): The slave device specified does not support setting the MAC address [ 90.760667][ T3483] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 90.803218][ T4952] bond1: (slave wireguard2): Enslaving as a backup interface with an up link [ 90.814176][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 90.824930][ T4946] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.900134][ T4966] loop0: detected capacity change from 0 to 2048 [ 90.926676][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.934705][ T4966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.950342][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.159455][ T4972] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.218545][ T4972] lo speed is unknown, defaulting to 1000 [ 91.806481][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 91.806496][ T29] audit: type=1326 audit(1763154376.654:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 91.836148][ T29] audit: type=1326 audit(1763154376.664:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.096698][ T29] audit: type=1400 audit(1763154376.904:6179): avc: denied { ioctl } for pid=4977 comm="syz.2.386" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.124517][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.154071][ T4978] loop2: detected capacity change from 0 to 512 [ 92.177361][ T29] audit: type=1400 audit(1763154377.034:6180): avc: denied { remount } for pid=4977 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.207846][ T4980] loop1: detected capacity change from 0 to 1024 [ 92.215021][ T4982] loop3: detected capacity change from 0 to 1024 [ 92.253460][ T29] audit: type=1326 audit(1763154377.054:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.277845][ T29] audit: type=1326 audit(1763154377.054:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.301760][ T29] audit: type=1326 audit(1763154377.054:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.325722][ T29] audit: type=1326 audit(1763154377.054:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.349428][ T29] audit: type=1326 audit(1763154377.054:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.373113][ T29] audit: type=1326 audit(1763154377.054:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5b62adf6c9 code=0x7ffc0000 [ 92.377209][ T4982] EXT4-fs: Ignoring removed orlov option [ 92.443183][ T4982] ext4: Unknown parameter 'obj_type' [ 92.465957][ T4980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.499937][ T4978] vlan2: entered allmulticast mode [ 92.505153][ T4978] hsr0: entered allmulticast mode [ 92.510291][ T4978] hsr_slave_0: entered allmulticast mode [ 92.515975][ T4978] hsr_slave_1: entered allmulticast mode [ 92.532780][ T4980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.574928][ T4985] xt_hashlimit: max too large, truncated to 1048576 [ 92.618024][ T4985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.650723][ T4980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 92.745009][ T4991] loop2: detected capacity change from 0 to 164 [ 92.805748][ T4991] netlink: 'syz.2.388': attribute type 13 has an invalid length. [ 92.921205][ T4982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.961382][ T4982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.140166][ T4982] wireguard0: left promiscuous mode [ 93.145504][ T4982] wireguard0: left allmulticast mode [ 93.162934][ T4982] geneve2: left promiscuous mode [ 93.173817][ T4989] netlink: 'syz.1.395': attribute type 12 has an invalid length. [ 93.188098][ T4991] gretap0: refused to change device tx_queue_len [ 93.226697][ T4991] net_ratelimit: 2 callbacks suppressed [ 93.226716][ T4991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.248139][ T52] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.275977][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.282358][ T9] syz2: Port: 1 Link DOWN [ 93.299722][ T52] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.360430][ T52] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.459910][ T52] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.672310][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 93.758772][ T5005] netlink: 'syz.4.390': attribute type 13 has an invalid length. [ 94.044481][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.162542][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 94.171484][ T5007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.393'. [ 94.197413][ T5007] loop2: detected capacity change from 0 to 2048 [ 94.213063][ T5009] loop3: detected capacity change from 0 to 2048 [ 94.256540][ T5007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.271681][ T5007] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.393: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 94.283876][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 94.305292][ T5009] loop3: p3 < > p4 < > [ 94.309504][ T5009] loop3: partition table partially beyond EOD, truncated [ 94.336246][ T5009] loop3: p3 start 4284289 is beyond EOD, truncated [ 94.360100][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 94.369049][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 94.382849][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.393473][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 94.409608][ T5009] netlink: 'syz.3.404': attribute type 13 has an invalid length. [ 94.438042][ T5020] loop0: detected capacity change from 0 to 512 [ 94.452224][ T5020] msdos: Unknown parameter 'nodlaxed' [ 94.503346][ T5022] loop2: detected capacity change from 0 to 512 [ 94.537376][ T5022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.550868][ T5022] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.564158][ T5022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.642149][ T5031] loop3: detected capacity change from 0 to 1024 [ 94.666867][ T5031] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 94.860833][ T5037] veth2: entered promiscuous mode [ 94.866009][ T5037] veth2: entered allmulticast mode [ 94.875816][ T5039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.894821][ T5037] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.922109][ T5041] loop1: detected capacity change from 0 to 1024 [ 94.930621][ T5039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.953868][ T5041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.975910][ T5042] ip6_vti0 speed is unknown, defaulting to 1000 [ 94.999494][ T5039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.013943][ T5042] lo speed is unknown, defaulting to 1000 [ 95.020253][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.048300][ T5039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.102667][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.120214][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.134729][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.150178][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.216723][ T5050] vlan1: entered promiscuous mode [ 95.221909][ T5050] vlan1: entered allmulticast mode [ 95.227097][ T5050] hsr_slave_1: entered allmulticast mode [ 95.252094][ T5049] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 95.421590][ T5061] validate_nla: 1 callbacks suppressed [ 95.421606][ T5061] netlink: 'syz.0.406': attribute type 13 has an invalid length. [ 95.553138][ T5066] loop4: detected capacity change from 0 to 1024 [ 95.585848][ T5067] loop1: detected capacity change from 0 to 512 [ 95.686785][ T5066] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 95.710923][ T5058] ip6gre1: entered promiscuous mode [ 95.716245][ T5058] ip6gre1: entered allmulticast mode [ 95.744726][ T5067] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.753116][ T5067] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.762531][ T5067] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 95.774558][ T5067] EXT4-fs (loop1): Remounting filesystem read-only [ 95.781269][ T5067] EXT4-fs (loop1): 1 truncate cleaned up [ 95.794607][ T5059] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.838506][ T3483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.846206][ T3483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.865253][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.877954][ T5074] __nla_validate_parse: 6 callbacks suppressed [ 95.877981][ T5074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 95.915191][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.925816][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.937774][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.957421][ T5067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.975510][ T5067] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.041631][ T5062] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.073050][ T5067] netlink: '+}[@': attribute type 13 has an invalid length. [ 96.077747][ T5062] lo speed is unknown, defaulting to 1000 [ 96.176162][ T5067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.406435][ T5085] loop4: detected capacity change from 0 to 164 [ 96.415851][ T5085] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 96.439393][ T5085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=5085 comm=syz.4.415 [ 96.454449][ T5086] netlink: 'syz.1.414': attribute type 6 has an invalid length. [ 96.602381][ T5076] loop2: detected capacity change from 0 to 512 [ 96.630367][ T5076] EXT4-fs: Ignoring removed nobh option [ 96.660752][ T5076] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.694993][ T5076] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.411: iget: bad i_size value: 38620345925642 [ 96.717743][ T5091] xt_CT: No such helper "snmp_trap" [ 96.731677][ T5076] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.411: couldn't read orphan inode 15 (err -117) [ 96.797273][ T5076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.815370][ T29] kauditd_printk_skb: 1321 callbacks suppressed [ 96.815387][ T29] audit: type=1326 audit(1763154381.674:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 96.843453][ T5076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.851503][ T5076] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 96.859262][ T5076] audit: backlog limit exceeded [ 96.864128][ T5076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.870777][ T5076] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 96.871031][ T29] audit: type=1326 audit(1763154381.674:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 96.878450][ T5076] audit: backlog limit exceeded [ 96.878549][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.901722][ T29] audit: type=1326 audit(1763154381.674:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 96.937483][ T29] audit: type=1326 audit(1763154381.674:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.1.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 96.958990][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.980387][ T5076] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz.2.411: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 97.000394][ T5076] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 97.104754][ T5076] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.179671][ T5105] netlink: 'syz.2.420': attribute type 13 has an invalid length. [ 97.187658][ T5105] netlink: 'syz.2.420': attribute type 27 has an invalid length. [ 97.247768][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 97.248401][ T5107] loop1: detected capacity change from 0 to 128 [ 97.263924][ T5111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'. [ 97.268593][ T5109] netem: change failed [ 97.299711][ T5109] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 97.299769][ T5111] netlink: 'syz.2.423': attribute type 30 has an invalid length. [ 97.307947][ T5109] batman_adv: batadv0: Removing interface: dummy0 [ 97.337700][ T5109] loop3: detected capacity change from 0 to 1024 [ 97.382073][ T5114] bio_check_eod: 119 callbacks suppressed [ 97.382089][ T5114] syz.1.421: attempt to access beyond end of device [ 97.382089][ T5114] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 97.409667][ T5114] syz.1.421: attempt to access beyond end of device [ 97.409667][ T5114] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 97.423269][ T5114] syz.1.421: attempt to access beyond end of device [ 97.423269][ T5114] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 97.438610][ T5114] syz.1.421: attempt to access beyond end of device [ 97.438610][ T5114] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 97.455722][ T5114] syz.1.421: attempt to access beyond end of device [ 97.455722][ T5114] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 97.469470][ T5114] syz.1.421: attempt to access beyond end of device [ 97.469470][ T5114] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 97.492395][ T5114] syz.1.421: attempt to access beyond end of device [ 97.492395][ T5114] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 97.504115][ T5117] loop2: detected capacity change from 0 to 2048 [ 97.506282][ T5114] syz.1.421: attempt to access beyond end of device [ 97.506282][ T5114] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 97.532305][ T5114] syz.1.421: attempt to access beyond end of device [ 97.532305][ T5114] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 97.541987][ T5117] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.559371][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.570013][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.571402][ T5114] syz.1.421: attempt to access beyond end of device [ 97.571402][ T5114] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 97.611383][ T5121] loop3: detected capacity change from 0 to 512 [ 97.632878][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 97.715518][ T5124] veth2: entered promiscuous mode [ 97.720601][ T5124] veth2: entered allmulticast mode [ 97.740307][ T5124] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.770876][ T5128] loop1: detected capacity change from 0 to 164 [ 97.786033][ T5128] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 97.803644][ T5128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=5128 comm=syz.1.427 [ 97.814461][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 97.825345][ T5132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.429'. [ 97.846827][ T5132] loop4: detected capacity change from 0 to 2048 [ 97.856133][ T5135] loop1: detected capacity change from 0 to 164 [ 97.884418][ T5132] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 98.036249][ T5144] loop4: detected capacity change from 0 to 512 [ 98.044311][ T5144] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.055947][ T5144] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 98.066239][ T5144] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.432: Corrupt directory, running e2fsck is recommended [ 98.068270][ T5135] netlink: 'syz.1.430': attribute type 13 has an invalid length. [ 98.079525][ T5144] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 98.095149][ T5144] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.432: corrupted in-inode xattr: invalid ea_ino [ 98.108785][ T5144] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.432: couldn't read orphan inode 15 (err -117) [ 98.124869][ T5135] gretap0: refused to change device tx_queue_len [ 98.132525][ T5144] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.134175][ T5135] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 98.144211][ T5144] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 98.170179][ T5144] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.432: Corrupt directory, running e2fsck is recommended [ 98.193010][ T5144] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.204628][ T5144] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 98.215040][ T5144] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.432: Corrupt directory, running e2fsck is recommended [ 98.332463][ T5152] xt_connbytes: Forcing CT accounting to be enabled [ 98.347454][ T5152] set match dimension is over the limit! [ 98.395283][ T5157] futex_wake_op: syz.2.437 tries to shift op by -1; fix this program [ 98.418115][ T5155] team0: Port device team_slave_0 removed [ 98.436014][ T5155] team0: Port device team_slave_1 removed [ 98.442272][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.449597][ T5144] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.461255][ T5144] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 98.471473][ T5144] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.432: Corrupt directory, running e2fsck is recommended [ 98.481921][ T5159] netlink: 4788 bytes leftover after parsing attributes in process `syz.3.438'. [ 98.485705][ T5144] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.432: path /95/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 98.514326][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.518749][ T5159] netlink: 4788 bytes leftover after parsing attributes in process `syz.3.438'. [ 98.523291][ T5144] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 64: comm syz.4.432: path /95/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 98.551983][ T5155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.578580][ T5162] loop1: detected capacity change from 0 to 1024 [ 98.588846][ T5162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.597501][ T5162] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 98.640189][ T5165] tipc: Started in network mode [ 98.645168][ T5165] tipc: Node identity e0000001, cluster identity 4711 [ 98.651981][ T5165] tipc: Enabling of bearer rejected, failed to enable media [ 98.703640][ T5167] netlink: 'syz.3.440': attribute type 13 has an invalid length. [ 98.737312][ T5169] loop3: detected capacity change from 0 to 164 [ 98.762127][ T5169] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 98.807722][ T5169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=5169 comm=syz.3.441 [ 99.015860][ T5175] loop4: detected capacity change from 0 to 164 [ 99.196794][ T5180] loop1: detected capacity change from 0 to 164 [ 99.229026][ T5178] loop4: detected capacity change from 0 to 2048 [ 99.272203][ T5178] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.296744][ T5178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.315286][ T5178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.385798][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 99.678377][ T5180] netlink: 'syz.1.445': attribute type 13 has an invalid length. [ 99.697608][ T5180] gretap0: refused to change device tx_queue_len [ 99.704618][ T5180] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 99.733995][ T5194] loop2: detected capacity change from 0 to 512 [ 99.836140][ T5194] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 99.844358][ T5194] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.854071][ T5194] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 99.866239][ T5194] EXT4-fs (loop2): Remounting filesystem read-only [ 99.873005][ T5194] EXT4-fs (loop2): 1 truncate cleaned up [ 100.036100][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.046861][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.047457][ T5199] netlink: 372 bytes leftover after parsing attributes in process `syz.0.449'. [ 100.067295][ T5196] batman_adv: batadv0: Interface deactivated: vxlan0 [ 100.089124][ T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 100.108509][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.124736][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.137281][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.158464][ T5192] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.186407][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.194837][ T5192] lo speed is unknown, defaulting to 1000 [ 100.205225][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.227834][ T5194] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.237296][ T5194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.465473][ T5214] loop2: detected capacity change from 0 to 164 [ 100.519768][ T5217] validate_nla: 2 callbacks suppressed [ 100.519848][ T5217] netlink: 'syz.0.451': attribute type 6 has an invalid length. [ 100.661735][ T5205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.684541][ T5205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.696563][ T5216] loop3: detected capacity change from 0 to 128 [ 100.763102][ T5216] FAT-fs (loop3): Directory bread(block 32) failed [ 100.770747][ T5216] FAT-fs (loop3): Directory bread(block 33) failed [ 100.778733][ T5216] FAT-fs (loop3): Directory bread(block 34) failed [ 100.786666][ T5216] FAT-fs (loop3): Directory bread(block 35) failed [ 100.794182][ T5216] FAT-fs (loop3): Directory bread(block 36) failed [ 100.802559][ T5216] FAT-fs (loop3): Directory bread(block 37) failed [ 100.810316][ T5216] FAT-fs (loop3): Directory bread(block 38) failed [ 100.822011][ T5216] FAT-fs (loop3): Directory bread(block 39) failed [ 100.845537][ T5216] FAT-fs (loop3): Directory bread(block 40) failed [ 100.863207][ T5216] FAT-fs (loop3): Directory bread(block 41) failed [ 101.056617][ T5227] loop2: detected capacity change from 0 to 164 [ 101.192406][ T5229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 101.220011][ T5229] ip6_vti0 speed is unknown, defaulting to 1000 [ 101.271229][ T5234] No such timeout policy "syz1" [ 101.303109][ T5229] lo speed is unknown, defaulting to 1000 [ 101.337570][ T5238] loop3: detected capacity change from 0 to 1024 [ 101.354702][ T5238] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 101.509388][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 101.545520][ T5246] team0: Port device team_slave_1 removed [ 101.675355][ T5243] netlink: 'syz.0.463': attribute type 13 has an invalid length. [ 101.687399][ T5243] gretap0: refused to change device tx_queue_len [ 101.694104][ T5243] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.839239][ T29] kauditd_printk_skb: 1057 callbacks suppressed [ 101.839318][ T29] audit: type=1326 audit(1763154386.684:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 101.869103][ T29] audit: type=1326 audit(1763154386.684:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 101.892386][ T29] audit: type=1326 audit(1763154386.684:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 101.917228][ T29] audit: type=1326 audit(1763154386.774:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 101.940645][ T29] audit: type=1326 audit(1763154386.774:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 101.964064][ T29] audit: type=1326 audit(1763154386.774:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 102.013849][ T29] audit: type=1326 audit(1763154386.774:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 102.037529][ T29] audit: type=1326 audit(1763154386.774:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 102.061133][ T29] audit: type=1326 audit(1763154386.774:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 102.084464][ T29] audit: type=1326 audit(1763154386.774:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5254 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29f5a0f6c9 code=0x7ffc0000 [ 102.192674][ T5262] ip6_vti0 speed is unknown, defaulting to 1000 [ 102.227865][ T5262] lo speed is unknown, defaulting to 1000 [ 102.320979][ T5265] netlink: 'syz.0.465': attribute type 13 has an invalid length. [ 102.485388][ T5267] loop1: detected capacity change from 0 to 128 [ 102.549840][ T5265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.558336][ T5265] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.568805][ T5265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.663204][ T5267] FAT-fs (loop1): Directory bread(block 32) failed [ 102.713889][ T5272] loop3: detected capacity change from 0 to 8192 [ 102.736033][ T5267] FAT-fs (loop1): Directory bread(block 33) failed [ 102.744657][ T5267] FAT-fs (loop1): Directory bread(block 34) failed [ 102.757683][ T5267] FAT-fs (loop1): Directory bread(block 35) failed [ 102.764723][ T5267] FAT-fs (loop1): Directory bread(block 36) failed [ 102.772147][ T5267] FAT-fs (loop1): Directory bread(block 37) failed [ 102.780890][ T5267] FAT-fs (loop1): Directory bread(block 38) failed [ 102.797059][ T5272] program syz.3.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.807075][ T5267] FAT-fs (loop1): Directory bread(block 39) failed [ 102.824746][ T5267] FAT-fs (loop1): Directory bread(block 40) failed [ 102.941798][ T5267] FAT-fs (loop1): Directory bread(block 41) failed [ 102.975304][ T5280] loop4: detected capacity change from 0 to 1024 [ 102.982012][ T5279] loop2: detected capacity change from 0 to 1024 [ 103.012948][ T5280] EXT4-fs mount: 12 callbacks suppressed [ 103.012986][ T5280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.092249][ T5284] bridge0: entered promiscuous mode [ 103.208611][ T5279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.222824][ T5280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.493750][ T5280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 103.514732][ T5289] loop1: detected capacity change from 0 to 164 [ 103.522021][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.533439][ T5280] netlink: 'syz.4.475': attribute type 12 has an invalid length. [ 103.679356][ T5296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=5296 comm=syz.0.479 [ 103.822875][ T5301] loop4: detected capacity change from 0 to 1024 [ 103.854926][ T5301] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 103.886324][ T5302] ip6_vti0 speed is unknown, defaulting to 1000 [ 104.012967][ T5302] lo speed is unknown, defaulting to 1000 [ 104.018432][ T5289] netlink: 'syz.1.476': attribute type 13 has an invalid length. [ 104.046397][ T5289] gretap0: refused to change device tx_queue_len [ 104.058003][ T5289] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.231227][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 104.299382][ T5310] pimreg: entered allmulticast mode [ 104.309248][ T5310] pimreg: left allmulticast mode [ 104.358267][ T5314] loop1: detected capacity change from 0 to 164 [ 104.420676][ T5317] netlink: 128 bytes leftover after parsing attributes in process `syz.2.486'. [ 104.429795][ T5317] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 104.513160][ T5320] loop2: detected capacity change from 0 to 1024 [ 104.571203][ T5320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.642545][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.685917][ T5324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.488'. [ 104.701526][ T5314] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 104.716219][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 104.728168][ T5314] gretap0: refused to change device tx_queue_len [ 104.739593][ T5314] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.801240][ T5329] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 104.815778][ T5329] bond0: entered promiscuous mode [ 104.821425][ T5329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.847455][ T5329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.854680][ T5329] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 104.865380][ T5329] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 104.897869][ T5335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.900472][ T5329] bond0: (slave wireguard0): making interface the new active one [ 104.905131][ T5335] IPv6: NLM_F_CREATE should be set when creating new route [ 104.905144][ T5335] IPv6: NLM_F_CREATE should be set when creating new route [ 104.927454][ T5329] wireguard0: entered promiscuous mode [ 104.927564][ T5335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.941608][ T5329] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 104.968769][ T5334] ip6_vti0 speed is unknown, defaulting to 1000 [ 104.980504][ T5335] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 105.003174][ T5337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.492'. [ 105.027266][ T5335] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 105.039131][ T5337] loop1: detected capacity change from 0 to 512 [ 105.045674][ T5334] lo speed is unknown, defaulting to 1000 [ 105.079509][ T5337] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.492: Failed to acquire dquot type 1 [ 105.079712][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.493'. [ 105.102883][ T5337] EXT4-fs (loop1): 1 truncate cleaned up [ 105.114959][ T5337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.145470][ T5337] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.156382][ T5349] loop2: detected capacity change from 0 to 164 [ 105.166553][ T5337] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.194439][ T5349] iso9660: Unknown parameter 'úˆ±ÛÜ»QRçÖ²Yx{V]y$' [ 105.201869][ T5349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=5349 comm=syz.2.494 [ 105.250875][ T5345] netlink: 'syz.3.493': attribute type 30 has an invalid length. [ 105.407886][ T5357] loop1: detected capacity change from 0 to 128 [ 105.424997][ T5357] FAT-fs (loop1): Directory bread(block 32) failed [ 105.439428][ T5357] FAT-fs (loop1): Directory bread(block 33) failed [ 105.447238][ T5357] FAT-fs (loop1): Directory bread(block 34) failed [ 105.454104][ T5359] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.498158][ T5357] FAT-fs (loop1): Directory bread(block 35) failed [ 105.531007][ T5357] FAT-fs (loop1): Directory bread(block 36) failed [ 105.548129][ T5357] FAT-fs (loop1): Directory bread(block 37) failed [ 105.554758][ T5357] FAT-fs (loop1): Directory bread(block 38) failed [ 105.580772][ T5357] FAT-fs (loop1): Directory bread(block 39) failed [ 105.605251][ T5357] FAT-fs (loop1): Directory bread(block 40) failed [ 105.624514][ T5359] 9pnet: Could not find request transport: få‡Db¦“Ñ0x000000000000000d [ 105.643411][ T5357] FAT-fs (loop1): Directory bread(block 41) failed [ 105.904481][ T5389] tipc: Enabling of bearer rejected, already enabled [ 105.936678][ T5391] ip6t_srh: unknown srh match flags 4000 [ 105.942676][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 105.965886][ T5392] macvtap1: entered promiscuous mode [ 105.971216][ T5392] team0: entered promiscuous mode [ 105.976296][ T5392] team_slave_0: entered promiscuous mode [ 105.982114][ T5392] macvtap1: entered allmulticast mode [ 105.987622][ T5392] team0: entered allmulticast mode [ 105.992784][ T5392] team_slave_0: entered allmulticast mode [ 106.013885][ T5395] loop4: detected capacity change from 0 to 512 [ 106.058617][ T5395] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.507: invalid block [ 106.077476][ T5392] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 106.088096][ T5394] team0: left allmulticast mode [ 106.093029][ T5394] team_slave_0: left allmulticast mode [ 106.098627][ T5394] team0: left promiscuous mode [ 106.103406][ T5394] team_slave_0: left promiscuous mode [ 106.109251][ T5395] EXT4-fs (loop4): Remounting filesystem read-only [ 106.145354][ T5395] EXT4-fs (loop4): 1 truncate cleaned up [ 106.168202][ T5395] EXT4-fs (loop4): mounted filesystem 0000b300-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.195546][ T5402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.509'. [ 106.219883][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 106.239476][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 106.297770][ T5402] netlink: 'syz.1.509': attribute type 30 has an invalid length. [ 106.392920][ T5405] 9pnet_fd: Insufficient options for proto=fd [ 106.448498][ T5405] ip6_vti0 speed is unknown, defaulting to 1000 [ 106.507848][ T5405] lo speed is unknown, defaulting to 1000 [ 106.783937][ T5404] netlink: 'syz.3.510': attribute type 13 has an invalid length. [ 106.837546][ T3321] EXT4-fs (loop4): unmounting filesystem 0000b300-0000-0000-0000-000000000000. [ 106.895499][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 106.895517][ T29] audit: type=1326 audit(1763154391.754:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 106.895606][ T5412] loop2: detected capacity change from 0 to 1024 [ 106.907582][ T29] audit: type=1326 audit(1763154391.754:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 106.940438][ T5412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.967969][ T5412] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.977367][ T29] audit: type=1326 audit(1763154391.784:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 107.000671][ T29] audit: type=1326 audit(1763154391.784:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 107.024378][ T29] audit: type=1326 audit(1763154391.784:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 107.047705][ T29] audit: type=1326 audit(1763154391.824:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 107.071098][ T29] audit: type=1326 audit(1763154391.824:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 107.094634][ T29] audit: type=1326 audit(1763154391.824:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5413 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 107.125944][ T29] audit: type=1400 audit(1763154391.974:8868): avc: denied { ioctl } for pid=5416 comm="syz.0.515" path="socket:[12529]" dev="sockfs" ino=12529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.150569][ T29] audit: type=1400 audit(1763154391.974:8869): avc: denied { bind } for pid=5416 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.194598][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 107.255415][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 107.270481][ T5424] loop4: detected capacity change from 0 to 1024 [ 107.278125][ T5412] netlink: 'syz.2.512': attribute type 12 has an invalid length. [ 107.296405][ T5424] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 107.310909][ T5424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 107.350245][ T5426] loop3: detected capacity change from 0 to 128 [ 107.357288][ T5424] EXT4-fs (loop4): failed to initialize system zone (-117) [ 107.370896][ T5424] EXT4-fs (loop4): mount failed [ 107.386592][ T5426] FAT-fs (loop3): Directory bread(block 32) failed [ 107.395154][ T5424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5424 comm=syz.4.513 [ 107.407613][ T5426] FAT-fs (loop3): Directory bread(block 33) failed [ 107.438854][ T5426] FAT-fs (loop3): Directory bread(block 34) failed [ 107.456791][ T5426] FAT-fs (loop3): Directory bread(block 35) failed [ 107.475639][ T5426] FAT-fs (loop3): Directory bread(block 36) failed [ 107.485682][ T5426] FAT-fs (loop3): Directory bread(block 37) failed [ 107.492221][ T5426] FAT-fs (loop3): Directory bread(block 38) failed [ 107.519674][ T5426] FAT-fs (loop3): Directory bread(block 39) failed [ 107.551922][ T5426] FAT-fs (loop3): Directory bread(block 40) failed [ 107.565774][ T5433] loop4: detected capacity change from 0 to 128 [ 107.619904][ T5426] FAT-fs (loop3): Directory bread(block 41) failed [ 107.961671][ T5422] bio_check_eod: 3 callbacks suppressed [ 107.961726][ T5422] syz.3.517: attempt to access beyond end of device [ 107.961726][ T5422] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 107.996843][ T5438] ip6t_srh: unknown srh match flags 4000 [ 108.002855][ T5422] syz.3.517: attempt to access beyond end of device [ 108.002855][ T5422] loop3: rw=0, sector=4600, nr_sectors = 4 limit=128 [ 108.119195][ T5440] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.157840][ T5441] v: renamed from ip6_vti0 (while UP) [ 108.203505][ T5445] team0: Port device team_slave_0 removed [ 108.214187][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.231067][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.238768][ T5443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.522'. [ 108.248666][ T5445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.265516][ T5440] lo speed is unknown, defaulting to 1000 [ 108.294287][ T5448] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 108.302103][ T5448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'. [ 108.330815][ T5448] veth1_vlan: left promiscuous mode [ 108.344011][ T5448] batman_adv: batadv0: Adding interface: veth1_vlan [ 108.350692][ T5448] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.392680][ T5477] hub 1-0:1.0: USB hub found [ 108.407870][ T5477] hub 1-0:1.0: 8 ports detected [ 108.411297][ T5448] batman_adv: batadv0: Interface activated: veth1_vlan [ 108.438984][ T5445] sch_fq: defrate 4294967295 ignored. [ 108.540422][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 108.670852][ T5516] loop2: detected capacity change from 0 to 164 [ 108.847112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.603799][ T5531] ip6t_srh: unknown srh match flags 4000 [ 109.611586][ T5532] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 109.648342][ T5532] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 109.667929][ T5516] netlink: 'syz.2.527': attribute type 13 has an invalid length. [ 109.675640][ T5532] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 109.706113][ T5516] gretap0: refused to change device tx_queue_len [ 109.713445][ T5516] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.891315][ T5527] bond0: (slave gretap1): making interface the new active one [ 109.899660][ T5527] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 109.916006][ T5527] macvlan2: entered promiscuous mode [ 109.921435][ T5527] macvlan2: entered allmulticast mode [ 109.944979][ T5527] bond0: entered promiscuous mode [ 109.950277][ T5527] gretap1: entered promiscuous mode [ 109.956480][ T5527] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.970250][ T5527] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 110.013797][ T5527] bond0: left promiscuous mode [ 110.018644][ T5527] gretap1: left promiscuous mode [ 110.368821][ T5548] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.535'. [ 110.396566][ T5548] netlink: zone id is out of range [ 110.401743][ T5548] netlink: zone id is out of range [ 110.438270][ T5548] netlink: zone id is out of range [ 110.443544][ T5548] netlink: zone id is out of range [ 110.455335][ T5548] netlink: zone id is out of range [ 110.460502][ T5548] netlink: zone id is out of range [ 110.463434][ T5551] loop3: detected capacity change from 0 to 512 [ 110.466337][ T5548] netlink: zone id is out of range [ 110.477148][ T5548] netlink: zone id is out of range [ 110.484114][ T5548] netlink: zone id is out of range [ 110.485689][ T5551] EXT4-fs (loop3): 1 orphan inode deleted [ 110.500255][ T5551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.537873][ T5557] loop2: detected capacity change from 0 to 164 [ 110.638788][ T5562] loop4: detected capacity change from 0 to 512 [ 110.656000][ T5562] EXT4-fs: Ignoring removed oldalloc option [ 110.666272][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.670029][ T5562] EXT4-fs: Mount option(s) incompatible with ext2 [ 110.684405][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 110.838841][ T5565] ip6t_srh: unknown srh match flags 4000 [ 111.015527][ T5567] loop2: detected capacity change from 0 to 2048 [ 111.027613][ T5567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.051029][ T5567] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.131051][ T5574] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.543: bg 0: block 345: padding at end of block bitmap is not set [ 111.236817][ T5574] EXT4-fs (loop2): Remounting filesystem read-only [ 111.318601][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 111.402299][ T5583] loop1: detected capacity change from 0 to 128 [ 111.427570][ T5583] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.452192][ T5583] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.509656][ T5573] netlink: 'syz.0.544': attribute type 13 has an invalid length. [ 111.518931][ T5573] gretap0: refused to change device tx_queue_len [ 111.642428][ T5579] sch_fq: defrate 4294967295 ignored. [ 111.702221][ T5589] loop3: detected capacity change from 0 to 164 [ 111.873096][ T5589] netlink: 'syz.3.548': attribute type 13 has an invalid length. [ 111.895037][ T5589] gretap0: refused to change device tx_queue_len [ 111.907980][ T29] kauditd_printk_skb: 850 callbacks suppressed [ 111.908047][ T29] audit: type=1326 audit(1763154396.764:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 111.937609][ T29] audit: type=1326 audit(1763154396.764:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 111.973318][ T29] audit: type=1326 audit(1763154396.764:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 111.996817][ T29] audit: type=1326 audit(1763154396.764:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 112.020477][ T29] audit: type=1326 audit(1763154396.764:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 112.043944][ T29] audit: type=1326 audit(1763154396.764:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 112.067820][ T29] audit: type=1326 audit(1763154396.764:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 112.091178][ T29] audit: type=1326 audit(1763154396.764:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65a32b789 code=0x7ffc0000 [ 112.114592][ T29] audit: type=1326 audit(1763154396.764:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa65a38f6c9 code=0x7ffc0000 [ 112.138017][ T29] audit: type=1326 audit(1763154396.794:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa65a386567 code=0x7ffc0000 [ 112.162312][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.246334][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.279705][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.360695][ T5605] loop3: detected capacity change from 0 to 164 [ 112.398988][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 112.447632][ T5610] netlink: 172 bytes leftover after parsing attributes in process `syz.1.554'. [ 112.480997][ T5610] siw: device registration error -23 [ 112.556965][ T5614] SELinux: Context @ is not valid (left unmapped). [ 112.704971][ T5623] loop3: detected capacity change from 0 to 164 [ 112.785023][ T23] kernel read not supported for file /343/net/ip_vs (pid: 23 comm: kworker/1:0) [ 112.799193][ T5626] ref_ctr_offset mismatch. inode: 0x293 offset: 0x0 ref_ctr_offset(old): 0x5c ref_ctr_offset(new): 0x0 [ 112.937139][ T3396] IPVS: starting estimator thread 0... [ 112.946220][ T5633] loop3: detected capacity change from 0 to 512 [ 112.953363][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.953374][ T5633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.953507][ T5621] ================================================================== [ 112.953536][ T5621] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 112.953567][ T5621] [ 112.953573][ T5621] write to 0xffffffff88e5b953 of 69 bytes by task 5633 on cpu 0: [ 112.953590][ T5621] vsnprintf+0x2ce/0x890 [ 112.953621][ T5621] pointer+0x833/0xcf0 [ 112.953645][ T5621] vsnprintf+0x491/0x890 [ 112.953668][ T5621] vscnprintf+0x41/0x90 [ 112.953693][ T5621] printk_sprint+0x30/0x2d0 [ 112.953726][ T5621] vprintk_store+0x599/0x860 [ 112.953752][ T5621] vprintk_emit+0x10d/0x580 [ 112.953773][ T5621] vprintk_default+0x26/0x30 [ 112.953795][ T5621] vprintk+0x1d/0x30 [ 112.953829][ T5621] _printk+0x79/0xa0 [ 112.953870][ T5621] __ext4_msg+0x18f/0x1a0 [ 112.953901][ T5621] ext4_fill_super+0x1cfa/0x3810 [ 112.953921][ T5621] get_tree_bdev_flags+0x291/0x300 [ 112.953947][ T5621] get_tree_bdev+0x1f/0x30 [ 112.953975][ T5621] ext4_get_tree+0x1c/0x30 [ 112.954001][ T5621] vfs_get_tree+0x57/0x1d0 [ 112.954026][ T5621] do_new_mount+0x24d/0x660 [ 112.954055][ T5621] path_mount+0x4a5/0xb70 [ 112.954084][ T5621] __se_sys_mount+0x28c/0x2e0 [ 112.954115][ T5621] __x64_sys_mount+0x67/0x80 [ 112.954146][ T5621] x64_sys_call+0x2b51/0x3000 [ 112.954175][ T5621] do_syscall_64+0xd2/0x200 [ 112.954210][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.954235][ T5621] [ 112.954243][ T5621] read to 0xffffffff88e5b970 of 8 bytes by task 5621 on cpu 1: [ 112.954264][ T5621] data_push_tail+0xfd/0x420 [ 112.954287][ T5621] data_alloc+0xfb/0x2e0 [ 112.954307][ T5621] prb_reserve+0x807/0xaf0 [ 112.954329][ T5621] vprintk_store+0x56d/0x860 [ 112.954355][ T5621] vprintk_emit+0x10d/0x580 [ 112.954384][ T5621] vprintk_default+0x26/0x30 [ 112.954409][ T5621] vprintk+0x1d/0x30 [ 112.954445][ T5621] _printk+0x79/0xa0 [ 112.954481][ T5621] usb_gadget_register_driver_owner+0x17e/0x1a0 [ 112.954527][ T5621] raw_ioctl+0xc5c/0x1d00 [ 112.954564][ T5621] __se_sys_ioctl+0xce/0x140 [ 112.954593][ T5621] __x64_sys_ioctl+0x43/0x50 [ 112.954619][ T5621] x64_sys_call+0x1816/0x3000 [ 112.954648][ T5621] do_syscall_64+0xd2/0x200 [ 112.954674][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.954699][ T5621] [ 112.954705][ T5621] value changed: 0x00000000ffffe338 -> 0x6920646572656472 [ 112.954724][ T5621] [ 112.954729][ T5621] Reported by Kernel Concurrency Sanitizer on: [ 112.954745][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz.1.557 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.954774][ T5621] Tainted: [W]=WARN [ 112.954782][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.954800][ T5621] ================================================================== [ 113.008038][ T5637] netlink: 'syz.4.562': attribute type 12 has an invalid length. [ 113.012809][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.025847][ T5634] IPVS: using max 1968 ests per chain, 98400 per kthread [ 113.035061][ T5621] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 113.037662][ T5633] EXT4-fs (loop3): 1 truncate cleaned up [ 113.275486][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.587493][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.